https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:28:54.444983+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-343485 EUVD-2026-343485 2026-10-06T18:28:54.511390+00:00 EUVD-2026-343485 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15209 fkie_cve-2026-15209 2026-10-06T18:28:54.511447+00:00

The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a low-privileged authenticated user can supply another user's ticket ID and read that ticket's contents, including the reporter's PII and message body.

 https://cve.radiocsirt.org/vuln/ghsa-rr3h-2v3g-4rp9 GHSA-rr3h-2v3g-4rp9 2026-10-06T18:28:54.511496+00:00

The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a low-privileged authenticated user can supply another user's ticket ID and read that ticket's contents, including the reporter's PII and message body.